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DETAILED ACTION 



1 . This Office Action is responding to the ROE received on 09/1 1/06. 

2. Clainns 14-34 are pending. 

Response to Arguments 

3. Applicant's arguments filed 09/1 1/06 have been fully considered but they are not 
persuasive. 

4. As per remark on page 1 1 continuing to 12, Applicant argues that Kocher does 
not teach or suggest, at minimum, the claim 14 feature using first computing 
means of a terminal for calculation, at the level of the terminal, at least one 
prevalidation value representing at least a quotient of a modulo n calculation. 
Examiner disagrees with the applicant. In figure 1 , Kocher describes an 
authentication process between a token, (e.g. smart card), and a terminal, (e.g. 
server). The figure 1 shows clearly the computation process requires at each 
party. At step 160, the terminal calculates the value A' to authenticate with A 
came from the smart card. This A' is similar to M' in Col 17 lines 45, which 
includes a quotient of a modulo n calculation. And further. Figure 3 shows a 
process of authentication comprising a calculation process by transmitting 
information back and forth between two parties, wherein the output of R' (335) is 
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transferred back to the sender for further process. Therefore it is clear that 
Kocher teaches the feature of claim 14. 



Claim Rejections - 35 USC § 102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - ' 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

6. Claims 14 and 34 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Kocher et al, US/6304658B1 , hereinafter "Kocher". 

7. As per claims 14 and 34: 

Kocher discloses "A method for verifying a signature, or respectively an 

authentication, utilizing an asymmetric private-key and public-key encryptographic 
calculation process between a terminal having first computing means provided with a 
first computing capacity and a smart card [ Kocher teaches of leak-proof cryptography 
authentication method above utilizing smart card and a terminal such as servers (Col 1 
lines 40-45, Figure 1).] comprising second computing means provided with second 
computing capacity lower than said first computing capacity" in (Col 15 lines 30-45), 
said terminal including electronic communication means for comnnunicating with the 
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smart card, wherein said first computing means of the terminal performs first 
cryptographic calculations with said private key (d) to produce a signature calculation, or 
respectively an authentication value, constituting response data (Col 15 lines 30-45, and 
Col 16 lines 28-52), and said second computing means of the smart card, based on said 
response data, performs second cryptographic calculations with said public key to 
perform said signature verification, or respectively said authentication (Col 15 lines 45- 
57), the first and second cryptographic calculations serving to implement the calculation 
of modulo-n or large-number multiplications, wherein the cryptographic calculation 
process uses said public key comprising a public exponent e and a public modulo n, 
and said a private key comprising a private exponent (Col 15 lines 30-45, and Col 16 
lines 28-52), said method further comprising: using said first computing means for 
calculating at the level of said terminal at least one prevalidation value (m', Col 17 line 
45, Col 16 lines 61-67, and Col 7 lines 30- 55) representing at least a quotient of a 
modulo n calculation; using electronic communication means of the terminal for 
transmitting to the smart card said response data comprising at least said prevalidation 
value (Col 21 lines 20-34); 

and retrieving said prevalidation value by the smart card and using said second 
computing means performing at least one modular reduction by utilizing said 
prevalidation value to obtain the remainder of the modulo calculation (The decrypting 
process, Col 16 lines 61-67, and Col 7 lines 30-55), "without any division operation at 
the level of the smart card" in (Col 17 lines 56-62, "Montgomery reduction is a technique 
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which allows efficient innplementation of modular multiplication without explicitly carrying 
out the classical modular reduction step"). 

Claim Rejections - 35 USC § 103 

8. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. Claims 17-18, 21-27, and 31-32 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Kocher in view of Blind Signature Schemes, (Menezes et al, 
Handbook of Applied Cryptography, Chapter 11.8.1 Pg 475), hereinafter 
"Menezes". (Cited in PTO 892 dated 05/18/05), and further in view of Liskov 
et al, US Patent No. 6411715B1, hereinafter Liskov. (Cited in PTO 892 dated 
09/08/04). 

10. As per claim 17: 

However, the Quotient Q2 is not directly taught. Nevertheless, Q2 equation is 
formulated to R*(R*R-Q1*n)/n so that the result of the signature verification is equal to 
Zero. This verification method is common in art and also taught by the RSA (Col 2 lines 
35-47). The verification process is concluded when the decrypted message is the same 
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as the sent message or another word the difference of the messages equals to zero. In 
additional, the blind signature method is also implemented in the formulation of Q2 (See 
Claim 15 basis of rejection using the blind Signature), where the equation is divided by 
n. Therefore, it would have been obvious for one having ordinary skill in the art at the 
time the invention was made to incorporate the blind signature and the RSA 
signatureverification method into Kocher's invention to reduce the processing burden on 
the Smart card processor which is limited. 

11. As per claim 18: 

The blinding signature and the RSA signature verification method described in claims 
15, 16 and 17 are also applied. 

12. As per claims 21 and 22: 

Kocher discloses "A method according to claims 16 and 18, characterized in that, for an 
authentication verification operation, said method further comprises the step for 
transmitting a prompt value from the smart card to the terminal" in (Col 15 lines 35-40). 
The prompt value in Col 15 lines 35-40 is the message M, which is not limited to the text 
message. The message must be originated from party B in order to verify the received 
message is the same as the original. 
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13. 1 1 . As per claims 23 and 24: 

Kocher discloses "A method according to claims 21 and 22, characterized in that 
said prompt value comprises a random value d modulo n, said response value M 
comprises an encrypted value B, and said function of the response value 
comprises a function f(A) of said random value d" in (Col 15 lines 35-40). As 
rejected in claims 21 and 22, the f(A) is recited as f(M) = Md mod n. 
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14. As per claims 25-27: 

Koclier discloses "A method according to claims 16 and 21-22, characterized in 
that said function f(A) if said random value A comprises a function among the 
functions f(A)=A" in (Col 15 lines 35-40). The function taught is Md modn. If n = 1 and 
d=1 , then f(A) = A. However, the "f(A)=n-A, f(A)= C*Amodn, f(A)= -C*A modn" is not 
taught by Kocher. Nevertheless, the result of the f(A) is depending on a mathematical 
functions f (A mod n). Therefore it would have been obvious at the time of the invention 
was made for one having ordinary skill in the art to implement plurality of different 
mathematical functions to acquire different results to add more verification steps of the 
signature. 
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15. As per claims 31 and 32: 

Kocher discloses "A method according to claim 23, characterized in that said 
function f(A) of said random value A is the function f(A)=A, which makes it 
possible to verify the equality of said difference and the validity of said 
authentication without any division operation for the modular reduction" in (Col 15 
lines 35-40, and Col 17 lines 30-65). Montgomery's reduction is an arithmetic reduction 
performing without any division operation (Col 17 lines 60-65). 

16. Claims 28-30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kocher in view of Menezes, and further in view of Stinson, 
Cryptography theory and Practice, CRC Press, Inc. page 3, hereinafter 
"Stinson", (Cited in PTO 892 dated 09/08/04) 
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17. As per claims 28, 29, and 30: 

Kocher and Menezes do not clearly teach "a method according to claim 25, 26, and 
27, respectively characterized in that at the level of the smart card, the calculation 
of said function f(A)=C*A mod n comprises calculation of the value C*A and 
storing of said value if C*A < n, and the calculation and storing of the value C*A - 
n if not, and in that calculation of said function f(A) = -C*A modulo n comprises 
calculation of the value n-C*A and storing of said value if n-C*A > 0, and 
otherwise calculation of the intermediate value C*n-C*A, and if said intermediate 
value is greater than or equal to zero, calculation and storing of the value of -C*A 
modulo n, for verifying the equality of said authentication without any division for 
the modular reduction". Nevertheless, the modular reduction method in the claim is 
the basic mathematic of modular reduction comprise of multiplication and subtraction 
only. The same method is explained in Stinson on page 3, (the definition 1.2). The C is 
similar to q1 and r1 is the remainder of a division of m by b. The checking of the 
difference less than or equal to 0 is to find out the arithmetic completed or not. 
Therefore, it would have been obvious at the time of the invention was made for one 
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having ordinary skill in the art to implement the modular reduction method without any 
division by trying number of variables until the remainder is found. The method would 
require minimal processing capacity given that n is not sufficiently large. 

18. Claims 19 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kocher in view of Menezes, and further in view of Poore et al, US 

Patent No. 6202933B1, hereinafter "Poore". (Cited in PTO 892 dated 
09/08/04) 

19. As per claims 19 and 20: 

Kocher and Menezes do not disclose, "the applying a condensation function to said 
message to obtain a message digest CM; and concatenating said message digest 
with a constant value Nevertheless, the feature is taught dearly by Poore in (Col 4 
lines 52-56). Therefore, it would have been obvious at the time of the invention was 
made for one having ordinary skill in the art to modify the invention to include Poore's 
teaching so that the signature is further be verified by using its digest. 
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20. Claim 33 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kocher in view of Poore et al, US Patent No. 6202933B1 , hereinafter 
Toore". (Cited in PTO 892 dated 09/08/04) 

21. As per claim 33: 

The encrypted value B, and a quotient value Q in claims 14, 15, and 17 is 
incorporated. However, Kocher does not teach the concatenation of the two values. 
Nevertheless, it is taught in Poore in (Col 4 lines 52-56). Therefore, it would have been 
obvious at the time of the invention was made for one having ordinary skill in the art to 
combine Poore's teaching to add a security feature to the message transferring 
process. 

Allowable Subject Matter 

22. Claims 15 and 16 are objected to as being dependent upon a rejected base 
claim, but would be allowable if rewritten in independent form including all of the 
limitations of the base claim and any intervening claims. 



Application/Control Number: 09/720,085 



Page 13 



Art Unit: 2135 

23. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Linh LD Son whose telephone number is 571- 
272-3856. The examiner can normally be reached on 9-6 (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Linh LD Son 
Examiner 
Art Unit 2135 
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